@b-apm/cli 0.1.0 → 0.2.1

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as runCli } from "./run-DV8BK0XR.mjs";
+import { t as runCli } from "./run-B56hJHe9.mjs";
 //#region src/cli.ts
 const code = await runCli(process.argv.slice(2));
 process.exitCode = code;

package/dist/index.mjs

@@ -1,2 +1,2 @@
-import { t as runCli } from "./run-DV8BK0XR.mjs";
+import { t as runCli } from "./run-B56hJHe9.mjs";
 export { runCli };

package/dist/{run-DV8BK0XR.mjs → run-B56hJHe9.mjs}

@@ -1,7 +1,7 @@
 import { createRequire } from "node:module";
-import { BAPM_LOCK_FILE, BAPM_MANIFEST_FILE, BAPM_NAME, ManifestError, MarketplaceFetchError, MarketplaceNotFoundError, addMarketplace, addMarketplacePackage, assertExperimentalRegistriesEnabled, autoDetectMarketplacePath, buildPublishArchive, cacheClean, cacheInfo, checkMarketplaceAuthoring, checkReleaseTag, checkSelfUpdate, classifyMarketplaceHostKind, clearMarketplaceCache, compileAgentsMd, createDefaultDownloader, createDefaultGitRemote, createDefaultTagLister, createMarketplaceSource, createMinimalManifest, createRegistryClient, declaredTargetIntegrationMap, exportSbom, extractPackArchive, fetchMarketplace, findPath, formatAuditCiJson, formatAuditCiSarif, getMarketplace, getVersion, initMarketplaceAuthoring, listDeps, listMarketplaces, loadManifest, loadMarketplaceAuthoringConfig, migrateMarketplaceYml, persistUserExecutableGrant, removeMarketplace, removeMarketplacePackage, resolveAndLock, resolveEffectiveFrozen, resolveRegistryBaseUrl, runAuditCi, runDoctor, runInstall, runOutdated, runPack, runPolicyStatus, runPrune, runUninstall, runUpdate, setMarketplacePackage, treeDeps, urlNamesRemoteManifest, validateMarketplace, validatePluginName, validateProjectName, viewPackage, whyDeps, writeAgentPluginManifest, writePluginJson, writeProducerManifest } from "@b-apm/core";
-import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
-import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { BAPM_LOCK_FILE, BAPM_MANIFEST_FILE, BAPM_NAME, ManifestError, MarketplaceFetchError, MarketplaceNotFoundError, addMarketplace, addMarketplacePackage, assertExperimentalRegistriesEnabled, autoDetectMarketplacePath, buildPublishArchive, cacheClean, cacheInfo, checkMarketplaceAuthoring, checkReleaseTag, checkSelfUpdate, checkVersionAlignment, classifyMarketplaceHostKind, clearMarketplaceCache, compileAgentsMd, createDefaultDownloader, createDefaultGitRemote, createDefaultTagLister, createMarketplaceSource, createMinimalManifest, createRegistryClient, declaredTargetIntegrationMap, detectAuthoringConfigSource, exportSbom, extractPackArchive, fetchMarketplace, findPath, formatAuditCiJson, formatAuditCiSarif, getMarketplace, getVersion, initMarketplaceAuthoring, listDeps, listMarketplaces, loadManifest, loadMarketplaceAuthoringConfig, migrateMarketplaceYml, persistUserExecutableGrant, removeMarketplace, removeMarketplacePackage, resolveAndLock, resolveEffectiveFrozen, resolveRegistryBaseUrl, runAuditCi, runDoctor, runInstall, runOutdated, runPack, runPolicyStatus, runPrune, runUninstall, runUpdate, setMarketplacePackage, treeDeps, urlNamesRemoteManifest, validateMarketplace, validatePluginName, validateProjectName, versionAlignmentErrorMessages, viewPackage, whyDeps, writeAgentPluginManifest, writePluginJson, writeProducerManifest } from "@b-apm/core";
+import { existsSync, mkdirSync, readFileSync, realpathSync, statSync, writeFileSync } from "node:fs";
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { spawn } from "node:child_process";
 import { createInterface } from "node:readline";
 import { pathToFileURL } from "node:url";
@@ -29,17 +29,17 @@ Commands:
   plugin       Scaffold a thin plugin project (plugin init)
   lock         Resolve dependencies and write the lockfile (no host deploy)
   install      Install agentic dependencies from ${deps.manifestFile} (or a pack .zip)
-  pack         Build a plain-zip producer archive (--archive / --check-release)
+  pack         Build a plain-zip producer archive (--archive / --check-release / --check-versions)
   publish      Publish flat registry zip via PUT (experimental; BAPM_EXPERIMENTAL_REGISTRIES=1)
   self-update  Check / apply CLI updates from npm (--check)
-  update       Re-resolve pins (rs-011/rs-012); --dry-run / -y
+  update       Re-resolve dependency pins; --dry-run / -y
   outdated     Compare lock pins to remote tips (exit 0 when outdated)
   uninstall    Remove packages from manifest, modules, deploy, lock
   prune        Remove orphan modules not in the resolved graph
-  deps         Inspect lock deps (list | tree | why)
+  deps         Inspect lock deps (list | tree | why) or wipe modules (clean)
   audit        Integrity checks (--ci gate)
   doctor       Environment and project sanity checks
-  compile      Emit AGENTS.md from discovered primitives (cursor)
+  compile      Emit the agent's instructions file (AGENTS.md, CLAUDE.md, …)
   cache        Modules-cache info | clean (apm_modules)
   policy       Policy status (read-only governance posture)
   approve      Persist user-local MCP allow (~/.bapm/config.json; not project yml)
@@ -54,6 +54,7 @@ Install flags (see also: bapm help install):
   --no-frozen              Opt out of frozen (including when CI defaults to frozen)
   --target <id>            Force a registered host target (overrides manifest active)
   --trust-transitive-mcp   Deploy dependency MCP (default: direct dependencies.mcp only)
+  --trust-bin / --no-trust-bin   Per-invocation bin/ consent (non-interactive defaults to skip)
 
 Experimental registries:
   Set BAPM_EXPERIMENTAL_REGISTRIES=1 to enable registry resolve/install and publish.
@@ -70,7 +71,7 @@ Usage:
 Options:
   --frozen                 Fail if lock is missing or pins drift; re-verify deployed_file_hashes when present
   --no-frozen              Opt out of frozen mode (including CI-default frozen)
-  --force                  Accept force. Does not refresh refs and does not bypass frozen or policy
+  --force                  Accepted for APM parity; currently has no effect (does not refresh refs or bypass frozen/policy)
   --allow-insecure         Dual-consent half for direct http:// dependencies
   --allow-insecure-host <hostname>
                            Allow transitive http:// from this FQDN (repeatable)
@@ -81,23 +82,32 @@ Options:
   --policy <path>          Use explicit policy file (wins over apm-policy.yml / bapm-policy.yml)
   --no-policy              Skip policy discovery and checks (also: BAPM_POLICY_DISABLE=1)
   --trust-transitive-mcp   Deploy MCP from dependencies (default: direct dependencies.mcp only)
+  --trust-bin              Consent to deploy dependency/plugin bin/ for this run (when policy allows)
+  --no-trust-bin           Skip bin/ deploy for this run (even when policy would allow)
   --help, -h               Show this help
 
 Host selection:
-  Priority: --target <id> → manifest active: [<id>, …] → sole auto-detect → fail.
+  Priority: --target <id> → manifest active: { target: <id> } → sole auto-detect → fail.
   Use active in bapm.yml / apm.yml when detect is missing or ambiguous.
 
-MCP / Cursor:
-  When the cursor target is active, eligible MCP servers are written to .cursor/mcp.json.
+MCP:
+  Eligible MCP servers are written to the active agent's MCP config (for Cursor: .cursor/mcp.json).
   Direct dependencies.mcp are deployed by default. Transitive MCP requires --trust-transitive-mcp
-  (or an executables.allow / allowExecutables grant for that package — sc-009).
-  Auto-detect without .cursor/ does not mkdir solely for MCP.
+  or an executables.allow grant for that package. Once any grant exists (bapm.yml executables,
+  bapm approve / deny), every dependency with MCP must be approved or denied.
+
+Bin consent:
+  Non-interactive (CI / frozen / non-TTY) installs skip dependency bin/ unless --trust-bin or a
+  persisted executables.allow bin grant applies. Interactive installs deploy with a warning.
+  Flags cannot override org/project deny.
 
 Unknown flags are rejected. --frozen and --no-frozen cannot be combined.
+--trust-bin and --no-trust-bin cannot be combined.
 Frozen (explicit or when CI is truthy) cannot be combined with --update.
 When the CI environment variable is truthy (not "", "0", or "false"), install
-defaults to frozen unless --no-frozen is passed (OpenAPM req-lk-018).
-A local .zip path is detected as a pack archive (install-from-archive round-trip).
+defaults to frozen unless --no-frozen is passed.
+A local .zip path is installed as a pack archive: members are added to the current directory,
+nothing else is removed, and existing files with different content are never overwritten.
 `;
 }
 //#endregion
@@ -115,8 +125,11 @@ Options:
 
 Notes:
   Requires BAPM_EXPERIMENTAL_REGISTRIES=1 (experimental registries gate).
-  Auth: set BAPM_REGISTRY_TOKEN (Bearer) for protected registries.
-  Archive layout: apm.yml + .apm/ at zip root (distinct from M7 pack).
+  Auth: set BAPM_REGISTRY_<NAME>_TOKEN or BAPM_REGISTRY_TOKEN (Bearer) for protected registries.
+  Requires name: owner/repo, registries.default, and a non-empty .apm/ directory.
+  Archive layout: apm.yml + .apm/ at zip root (differs from the bapm pack zip).
+  Optional project-root .bapmignore omits matching docs and .apm members (wire apm.yml always kept);
+  ignoring all of .apm fails closed. --zip uploads prebuilt bytes without re-applying .bapmignore.
   Unknown flags are rejected.
 `;
 }
@@ -1630,10 +1643,12 @@ async function outdatedCommand(argv, outdated) {
 //#endregion
 //#region src/commands/pack.ts
 async function packCommand(argv, pack) {
-	return (await pack.run({
+	const result = await pack.run({
 		args: argv,
 		cwd: process.cwd()
-	})).ok ? 0 : 1;
+	});
+	if (result.ok) return 0;
+	return result.exitCode ?? 1;
 }
 //#endregion
 //#region src/commands/plugin.ts
@@ -1705,7 +1720,7 @@ async function viewCommand(argv, view) {
 //#endregion
 //#region src/modules/Approve/services/runApprove.ts
 function formatApproveHelp(deps) {
-	return `${deps.name} approve — Persist user-local executable allow (sc-010)
+	return `${deps.name} approve — Persist user-local executable allow
 
 Usage:
   bapm approve <package-name> [--user]
@@ -1920,7 +1935,7 @@ Usage:
 Options:
   --ci              CI gate: lock present + deployed presence + hash re-verify
   -f, --format      Output format: text (default), json, or sarif
-  -o, --output      Write report body to file (mkdir parents; body not on stdout)
+  -o, --output      Write json/sarif report to file (mkdir parents); text always prints to stdout
 `;
 }
 function serializeBody(format, result) {
@@ -2091,7 +2106,7 @@ Usage:
   bapm cache clean [-y|--yes] [--dry-run]
 
 Options:
-  -y, --yes    Confirm clean without interactive prompt
+  -y, --yes    Required to clean (there is no interactive prompt)
   --dry-run    Preview clean without deleting (no -y required)
   --help, -h   Show this help
 
@@ -2278,25 +2293,58 @@ function isContainedUnderRoot(absoluteTarget, projectRoot) {
 	if (targetRelativeToRoot === "") return true;
 	return !(targetRelativeToRoot === ".." || targetRelativeToRoot.startsWith("..\\") || targetRelativeToRoot.startsWith("../") || isAbsolute(targetRelativeToRoot));
 }
-/** Resolve npm package from the project install (and optionally Node globalPaths). */
-function resolveNpmProjectOrGlobal(specifier, cwd) {
+let cachedGlobalModuleRoots;
+/**
+* Return the node_modules root only when the invoked entrypoint is this CLI
+* package. Resolving the symlink handles npm and pnpm global bin shims without
+* spawning a package manager during every CLI process.
+*/
+function globalModuleRootForCliEntry(entryPath) {
+	if (!entryPath) return void 0;
+	let entry = resolve(entryPath);
+	try {
+		entry = realpathSync(entry);
+	} catch {}
+	for (let directory = dirname(entry);; directory = dirname(directory)) {
+		if (basename(directory) === "node_modules") {
+			const packagePath = relative(directory, entry).split(sep);
+			return packagePath[0] === "@b-apm" && packagePath[1] === "cli" ? directory : void 0;
+		}
+		if (dirname(directory) === directory) return void 0;
+	}
+}
+function isWorkspaceModuleRoot(moduleRoot) {
+	for (let directory = dirname(moduleRoot);; directory = dirname(directory)) {
+		if (existsSync(join(directory, "pnpm-workspace.yaml"))) return true;
+		if (dirname(directory) === directory) return false;
+	}
+}
+/** Locate the global module root of the invoked CLI without consulting dev dependencies. */
+function globalModuleRoots() {
+	if (cachedGlobalModuleRoots) return cachedGlobalModuleRoots;
+	const root = globalModuleRootForCliEntry(process.argv[1]);
+	cachedGlobalModuleRoots = root && !isWorkspaceModuleRoot(root) ? [root] : [];
+	return cachedGlobalModuleRoots;
+}
+/** Resolve a canonical package from the project, global paths, or global module roots. */
+function resolveNpmProjectOrGlobal(specifier, cwd, globalRoots = globalModuleRoots()) {
 	const requireFromCwd = createRequire(join(cwd, "package.json"));
 	try {
 		return requireFromCwd.resolve(specifier);
 	} catch (cwdErr) {
 		const mod = createRequire(import.meta.url)("node:module");
-		const globalPaths = Array.isArray(mod.globalPaths) ? mod.globalPaths : [];
-		if (globalPaths.length === 0) throw cwdErr;
+		const searchRoots = [...Array.isArray(mod.globalPaths) ? mod.globalPaths.filter((path) => !isWorkspaceModuleRoot(path)) : [], ...globalRoots];
+		if (searchRoots.length === 0) throw cwdErr;
 		try {
-			return requireFromCwd.resolve(specifier, { paths: [...globalPaths] });
+			return requireFromCwd.resolve(specifier, { paths: searchRoots });
 		} catch {
 			throw cwdErr;
 		}
 	}
 }
-/** npm package: project cwd first, then CLI-shipped fallback (map) or globalPaths (canonical). */
+/** npm package: project cwd first, then CLI fallback (map) or global lookup (canonical). */
 function resolveNpmPackageSpecifier(specifier, cwd, options = {}) {
-	if (!(options.allowCliFallback !== false)) return resolveNpmProjectOrGlobal(specifier, cwd);
+	if (!(options.allowCliFallback !== false)) return resolveNpmProjectOrGlobal(specifier, cwd, options.globalRoots);
 	const requireFromCwd = createRequire(join(cwd, "package.json"));
 	try {
 		return requireFromCwd.resolve(specifier);
@@ -2354,7 +2402,10 @@ async function loadIntegrationFromPackage(specifier, expectedId, cwd, options =
 	let resolved;
 	if (isLocalPathSpecifier(specifier)) resolved = resolveLocalIntegrationPath(specifier, expectedId, cwd);
 	else try {
-		resolved = resolveNpmPackageSpecifier(specifier, cwd, { allowCliFallback: options.allowCliFallback });
+		resolved = resolveNpmPackageSpecifier(specifier, cwd, {
+			allowCliFallback: options.allowCliFallback,
+			globalRoots: options.globalRoots
+		});
 	} catch (cause) {
 		throw new ManifestIntegrationLoadError(expectedId, specifier, "unresolvable", `unresolvable module: ${cause instanceof Error ? cause.message : "cannot find module / unresolvable package"}`);
 	}
@@ -2433,7 +2484,7 @@ function createCliIntegrationRegistry() {
 /**
 * Append actionable install guidance for unknown-target / missing-detect diagnostics.
 */
-const ALREADY_GUIDED = /@bapm\/integration-|install the (?:host )?integration|npm i |not installed or resolvable/i;
+const ALREADY_GUIDED = /@b-apm\/integration-|install the (?:host )?integration|npm i |not installed or resolvable/i;
 function extractUnregisteredId(message) {
 	return message.match(/unknown or unregistered target:\s*([^\s,;]+)/i)?.[1]?.replace(/[."']+$/, "");
 }
@@ -2568,7 +2619,7 @@ function parseCompileArgs(argv) {
 	};
 }
 function formatCompileHelp(deps) {
-	return `${deps.name} compile — Emit target-owned output from discovered primitives
+	return `${deps.name} compile — Emit the agent's instructions file (AGENTS.md, CLAUDE.md, …)
 
 Usage:
   bapm compile [-o PATH] [--target <id>] [--dry-run] [-v] [--validate]
@@ -2584,6 +2635,7 @@ Options:
 Host selection: --target <id> → sole manifest active → sole auto-detect → fail.
 When active lists multiple hosts, pass --target <id>. Compile stays single-host.
 The selected target determines the default output path and rendering.
+Run from the directory that contains ${deps.manifestFile}.
 `;
 }
 async function runCompileCli(deps, options) {
@@ -2668,7 +2720,7 @@ const compile = createCompile({
 //#endregion
 //#region src/modules/Deny/services/runDeny.ts
 function formatDenyHelp(deps) {
-	return `${deps.name} deny — Persist user-local executable deny (sc-010)
+	return `${deps.name} deny — Persist user-local executable deny
 
 Usage:
   bapm deny <package-name> [--user]
@@ -2980,7 +3032,7 @@ Options:
 
 Informational:
   auth                     Whether GITHUB_TOKEN / GH_TOKEN is set (names only, never secrets)
-  network                  With -v: git ls-remote probe (never critical)
+  network                  With -v: git ls-remote probe of github.com (never critical)
 `;
 }
 async function runDoctorCli(deps, options) {
@@ -3197,12 +3249,14 @@ Usage:
 
 Options:
   -y, --yes           Non-interactive defaults (version 0.1.0)
-  --target <id>       Record host target (e.g. cursor)
+  --target <id>       Activate an agent (e.g. cursor); also writes a targets: entry that
+                      limits deployment to that agent
   --help, -h          Show this help
 
 Notes:
   Writes ${deps.manifestFile} only. Refuses if apm.yml or bapm.yml already exists.
-  Unknown flags are rejected. No plugin / marketplace scaffold in M7.
+  Remove the generated targets: block if the project is shared with other agents.
+  Unknown flags are rejected. For plugin or marketplace scaffolds use bapm plugin init / bapm marketplace init.
 `;
 }
 function parseInitArgs(argv) {
@@ -3269,7 +3323,7 @@ function scaffoldTargetFields(targetId) {
 	const id = targetId.trim();
 	return {
 		targets: { [id]: `@b-apm/integration-${id}` },
-		active: [id]
+		active: { target: id }
 	};
 }
 async function runInit(deps, options) {
@@ -3354,6 +3408,90 @@ const init = createInit({
 	detectCursor: (cwd) => existsSync(join(cwd, ".cursor"))
 });
 //#endregion
+//#region src/common/formatErrorCauseChain.ts
+const DEFAULT_MAX_DEPTH = 5;
+const DEFAULT_INDENT = "  ";
+const CAUSE_LABEL = "cause";
+const CAUSE_INDENT_CONTINUATION = "  ";
+function isObjectLike(value) {
+	return typeof value === "object" && value !== null || typeof value === "function";
+}
+function safeString(value) {
+	try {
+		return String(value);
+	} catch {
+		try {
+			return Object.prototype.toString.call(value);
+		} catch {
+			return "[unprintable value]";
+		}
+	}
+}
+/** Best-effort message for Errors, error-like objects, strings, and primitives. */
+function formatErrorMessage(value) {
+	if (value instanceof Error) return value.message;
+	if (typeof value === "string") return value;
+	if (isObjectLike(value)) try {
+		if ("message" in value) return safeString(value.message);
+	} catch {}
+	return safeString(value);
+}
+function causeOf(value) {
+	if (!isObjectLike(value)) return { present: false };
+	try {
+		if (!("cause" in value)) return { present: false };
+		return {
+			present: true,
+			cause: value.cause
+		};
+	} catch {
+		return { present: false };
+	}
+}
+function renderCause(value, indent) {
+	const [first = "", ...rest] = formatErrorMessage(value).split(/\r?\n/);
+	const continuation = `${indent}${CAUSE_INDENT_CONTINUATION}`;
+	return [`${indent}${CAUSE_LABEL}: ${first}`, ...rest.map((line) => `${continuation}${line}`)].join("\n");
+}
+/**
+* Format `error` for terminal output.
+*
+* @example
+* formatErrorCauseChain(err, { verbose: true })
+* // "Failed to download https://…\n  cause: Local path not found: skills/frontend-design"
+*/
+function formatErrorCauseChain(error, options = {}) {
+	const rootMessage = options.message ?? formatErrorMessage(error);
+	if (!options.verbose) return rootMessage;
+	const maxDepth = options.maxDepth !== void 0 && Number.isFinite(options.maxDepth) ? Math.max(0, Math.floor(options.maxDepth)) : DEFAULT_MAX_DEPTH;
+	if (maxDepth === 0) return rootMessage;
+	const indent = options.indent ?? DEFAULT_INDENT;
+	const visited = /* @__PURE__ */ new WeakSet();
+	if (isObjectLike(error)) visited.add(error);
+	const lines = [rootMessage];
+	let current = error;
+	let depth = 0;
+	for (;;) {
+		const link = causeOf(current);
+		if (!link.present) break;
+		const cause = link.cause;
+		if (cause === void 0 || cause === null) break;
+		if (isObjectLike(cause) && visited.has(cause)) {
+			lines.push(`${indent}${CAUSE_LABEL}: [circular cause]`);
+			break;
+		}
+		if (depth >= maxDepth) {
+			lines.push(`${indent}${CAUSE_LABEL}: [cause chain truncated after ${maxDepth} level(s)]`);
+			break;
+		}
+		if (isObjectLike(cause)) visited.add(cause);
+		lines.push(renderCause(cause, indent));
+		current = cause;
+		depth += 1;
+	}
+	return lines.join("\n");
+}
+//#endregion
 //#region src/modules/Install/services/runInstall.ts
 function formatInstallHelp(deps) {
 	return `${deps.name} install — Install agentic dependencies from ${deps.manifestFile}
@@ -3367,7 +3505,7 @@ Options:
   --frozen                 Fail if lock is missing or pins drift; re-verify deployed_file_hashes when present
   --no-frozen              Opt out of frozen mode (including CI-default frozen)
   --dry-run                Preview direct deps / would-add; no durable project writes
-  --force                  Accept force (overwrite / future security gates). Does not refresh refs and does not bypass frozen or policy
+  --force                  Accepted for APM parity; currently has no effect (does not refresh refs or bypass frozen/policy)
   --allow-insecure         Allow direct http:// deps that also set allow_insecure: true (dual consent)
   --allow-insecure-host <hostname>
                            Allow transitive http:// deps from this FQDN (repeatable)
@@ -3381,22 +3519,29 @@ Options:
   --policy <path>          Use explicit policy file (wins over apm-policy.yml / bapm-policy.yml)
   --no-policy              Skip policy discovery and checks (also: BAPM_POLICY_DISABLE=1)
   --trust-transitive-mcp   Deploy MCP from dependencies (default: direct dependencies.mcp only)
+  --trust-bin              Consent to deploy dependency/plugin bin/ for this run (when policy allows)
+  --no-trust-bin           Skip bin/ deploy for this run (even when policy would allow)
   --help, -h               Show this help
 
 Notes:
   Unknown flags are rejected. Combining --frozen with --no-frozen is an error.
+  Combining --trust-bin with --no-trust-bin is an error.
   Combining frozen (explicit or CI-default) with --update is an error.
-  Frozen integrity (lk-015/017/018) is kept; MCP config sync vs pins is optional/default-off.
+  Frozen re-verifies lock pins, deployed file hashes and package tree hashes.
   When the CI environment variable is truthy (not "", "0", or "false"), install
-  defaults to frozen unless --no-frozen is passed (OpenAPM req-lk-018).
-  A local .zip path is consumed as a pack archive (install-from-archive).
+  defaults to frozen unless --no-frozen is passed.
+  Non-interactive installs (CI, BAPM_NON_INTERACTIVE, non-TTY, or frozen) do not deploy
+  dependency bin/ by default without --trust-bin or a persisted executables.allow bin grant;
+  interactive installs deploy it with a warning.
+  --trust-bin / --no-trust-bin are per-invocation consent and cannot override org/project deny.
+  A local .zip path is installed as a pack archive: members are added to the current directory,
+  nothing else is removed, and existing files with different content are never overwritten.
   Non-zip positionals are package refs added to dependencies.apm (auto-creates
   a minimal manifest when missing). Frozen rejects positional package-ref add.
   --exclude filters MCP/runtime configure only — not a full skip-install.
-  --force is distinct from --target (forced-target activation).
-  Host selection: --target <id> → manifest active: [<id>, …] → sole auto-detect → fail.
+  Host selection: --target <id> → manifest active: { target: <id> } → sole auto-detect → fail.
   Set active in bapm.yml / apm.yml when detect is missing or ambiguous.
-  When cursor is active, eligible MCP servers write .cursor/mcp.json (direct mcp by default).
+  Eligible MCP servers are written to the active agent's MCP config (direct mcp by default).
 `;
 }
 function parseInstallArgs(argv, options = {}) {
@@ -3418,6 +3563,8 @@ function parseInstallArgs(argv, options = {}) {
 	let policyPath;
 	let noPolicy = false;
 	let trustTransitiveMcp = false;
+	let trustBinAllow = false;
+	let trustBinDeny = false;
 	let help = false;
 	const partial = () => ({
 		frozen: frozenFlag,
@@ -3437,7 +3584,8 @@ function parseInstallArgs(argv, options = {}) {
 		parallelDownloads,
 		policyPath,
 		noPolicy,
-		trustTransitiveMcp
+		trustTransitiveMcp,
+		trustBin: trustBinAllow ? "allow" : trustBinDeny ? "deny" : "default"
 	});
 	for (let i = 0; i < argv.length; i++) {
 		const arg = argv[i];
@@ -3485,6 +3633,14 @@ function parseInstallArgs(argv, options = {}) {
 			trustTransitiveMcp = true;
 			continue;
 		}
+		if (arg === "--trust-bin") {
+			trustBinAllow = true;
+			continue;
+		}
+		if (arg === "--no-trust-bin") {
+			trustBinDeny = true;
+			continue;
+		}
 		if (arg === "--allow-insecure-host") {
 			const next = argv[i + 1];
 			if (!next || next.startsWith("-")) return {
@@ -3649,6 +3805,11 @@ function parseInstallArgs(argv, options = {}) {
 		...partial(),
 		error: "Cannot combine --frozen and --no-frozen (mutually exclusive flags conflict)"
 	};
+	if (trustBinAllow && trustBinDeny) return {
+		...partial(),
+		error: "Cannot combine --trust-bin and --no-trust-bin (mutually exclusive flags conflict)"
+	};
+	const trustBin = trustBinAllow ? "allow" : trustBinDeny ? "deny" : "default";
 	const env = options.env ?? process.env;
 	let frozen;
 	try {
@@ -3661,12 +3822,14 @@ function parseInstallArgs(argv, options = {}) {
 		const message = error instanceof Error ? error.message : String(error);
 		return {
 			...partial(),
+			trustBin,
 			error: message
 		};
 	}
 	if (frozen && update) return {
 		...partial(),
 		frozen,
+		trustBin,
 		error: "Frozen mode rejects --update (frozen+update mutation rejected)"
 	};
 	return {
@@ -3688,6 +3851,7 @@ function parseInstallArgs(argv, options = {}) {
 		policyPath,
 		noPolicy,
 		trustTransitiveMcp,
+		trustBin,
 		help
 	};
 }
@@ -3785,6 +3949,8 @@ async function runCoreInstall(deps, options, parsed, archivePath) {
 			policy: parsed.policyPath,
 			noPolicy: parsed.noPolicy,
 			trustTransitiveMcp: parsed.trustTransitiveMcp,
+			trustBin: parsed.trustBin,
+			env: options.env ?? process.env,
 			gitRemote: createDefaultGitRemote(),
 			tagLister: createDefaultTagLister(),
 			downloader: createDefaultDownloader()
@@ -3797,8 +3963,12 @@ async function runCoreInstall(deps, options, parsed, archivePath) {
 		} else if (result.activeTargets && result.activeTargets.length > 0) console.log(`${deps.name}: installed for ${result.activeTargets.join(", ")}`);
 		return { ok: true };
 	} catch (error) {
-		const message = enrichUnregisteredTargetMessage(error instanceof Error ? error.message : typeof error === "object" && error !== null && "message" in error ? String(error.message) : String(error), cwd);
-		console.error(`${deps.name}: ${message}`);
+		const message = enrichUnregisteredTargetMessage(formatErrorMessage(error), cwd);
+		const rendered = formatErrorCauseChain(error, {
+			verbose: parsed.verbose,
+			message
+		});
+		console.error(`${deps.name}: ${rendered}`);
 		return {
 			ok: false,
 			message
@@ -4062,10 +4232,12 @@ Usage:
   bapm pack [options]
 
 Options:
-  --archive                    Write a plain zip artifact (M7 MUST path)
+  --archive                    Write a plain zip artifact (also the default without flags)
   --agent-plugins              Pack a validated Agent Plugins v1 portable root
   --dry-run                    Validate / collect without durable zip or marketplace.json
-  --check-release              pr-004 tag↔manifest version gate
+  --check-release              Check that the manifest version matches the git tag
+  --check-versions             Marketplace local-package version alignment (lockstep /
+                               tag_pattern / per_package); plugin.json fallback when no YAML
   --tag <name>                 Tag under check (optional with --check-release; else HEAD)
   --marketplace <all|none|list>
                                Filter host marketplace emit (claude,codex); default: all configured
@@ -4077,7 +4249,10 @@ Options:
 
 Notes:
   Unknown flags are rejected. --check-release never creates or pushes tags.
-  Pack refuses secret-pattern paths (.env, *.pem, …) per sc-007.
+  --check-versions is distinct from --check-release (marketplace alignment vs tag↔root version).
+  Pack refuses secret-pattern paths (.env, *.pem, …).
+  Optional project-root .bapmignore (gitignore syntax) omits matching files from the zip;
+  root bapm.yml/apm.yml stay included; .gitignore is not used as a fallback.
   When marketplace: is present with outputs selected, pack emits Claude/Codex marketplace.json.
   Marketplace-only projects (no dependencies:) emit JSON and skip empty zip.
   --agent-plugins never emits marketplace output and requires root plugin.json.
@@ -4088,6 +4263,7 @@ function parsePackArgs(argv) {
 	let agentPlugins = false;
 	let dryRun = false;
 	let checkRelease = false;
+	let checkVersions = false;
 	let tag;
 	let marketplace;
 	const marketplacePaths = [];
@@ -4099,6 +4275,7 @@ function parsePackArgs(argv) {
 		agentPlugins,
 		dryRun,
 		checkRelease,
+		checkVersions,
 		tag,
 		marketplace,
 		marketplacePaths,
@@ -4127,6 +4304,10 @@ function parsePackArgs(argv) {
 			checkRelease = true;
 			continue;
 		}
+		if (arg === "--check-versions") {
+			checkVersions = true;
+			continue;
+		}
 		if (arg === "--offline") {
 			offline = true;
 			continue;
@@ -4205,6 +4386,65 @@ function parsePackArgs(argv) {
 		help
 	};
 }
+const VERSION_ALIGNMENT_EXIT = 3;
+function runCheckVersionsGate(deps, cwd) {
+	const root = cwd ?? process.cwd();
+	const detect = deps.detectAuthoringConfigSource;
+	const load = deps.loadMarketplaceAuthoringConfig;
+	const check = deps.checkVersionAlignment;
+	const formatErrors = deps.versionAlignmentErrorMessages;
+	if (!detect || !load || !check || !formatErrors) {
+		const message = "Internal error: --check-versions deps not wired";
+		console.error(`${deps.name}: ${message}`);
+		return {
+			ok: false,
+			message,
+			exitCode: 1
+		};
+	}
+	const detected = detect({ cwd: root });
+	if (!detected.ok || detected.kind === "none") {
+		console.log(`${deps.name}: Version alignment check skipped: no marketplace block; nothing to check.`);
+		return {
+			ok: true,
+			exitCode: 0
+		};
+	}
+	let config;
+	try {
+		config = load({ cwd: root }).config;
+	} catch (error) {
+		const message = error instanceof Error ? error.message : typeof error === "object" && error !== null && "message" in error ? String(error.message) : String(error);
+		console.error(`${deps.name}: ${message}`);
+		return {
+			ok: false,
+			message,
+			exitCode: 1
+		};
+	}
+	const report = check({
+		config,
+		cwd: root,
+		projectRoot: root,
+		root
+	});
+	if (report.ok) {
+		if (report.expected !== null) console.log(`${deps.name}: Version alignment OK [strategy=${report.strategy}, expected=${report.expected}]`);
+		else console.log(`${deps.name}: Version alignment OK [strategy=${report.strategy}]`);
+		return {
+			ok: true,
+			exitCode: 0
+		};
+	}
+	if (report.expected !== null) console.error(`${deps.name}: Version alignment failed [strategy=${report.strategy}, expected=${report.expected}]`);
+	else console.error(`${deps.name}: Version alignment failed [strategy=${report.strategy}]`);
+	for (const msg of formatErrors(report)) console.error(`${deps.name}: ${msg}`);
+	return {
+		ok: false,
+		message: "Version alignment check failed",
+		exitCode: VERSION_ALIGNMENT_EXIT
+	};
+}
 async function runPackCli(deps, options) {
 	const parsed = parsePackArgs(options.args ?? []);
 	if (parsed.help) {
@@ -4220,6 +4460,16 @@ async function runPackCli(deps, options) {
 	}
 	const cwd = options.cwd;
 	try {
+		if (parsed.checkVersions && !parsed.archive && parsed.marketplace === void 0) {
+			if (parsed.checkRelease) {
+				const gate = await deps.checkReleaseTag({
+					cwd,
+					tag: parsed.tag
+				});
+				for (const w of gate.warnings ?? []) console.error(`${deps.name}: warning: ${w}`);
+			}
+			return runCheckVersionsGate(deps, cwd);
+		}
 		if (parsed.checkRelease && !parsed.archive && parsed.marketplace === void 0) {
 			const gate = await deps.checkReleaseTag({
 				cwd,
@@ -4228,7 +4478,11 @@ async function runPackCli(deps, options) {
 			for (const w of gate.warnings ?? []) console.error(`${deps.name}: warning: ${w}`);
 			return { ok: true };
 		}
-		if (!parsed.archive && !parsed.checkRelease) parsed.archive = true;
+		if (!parsed.archive && !parsed.checkRelease && !parsed.checkVersions) parsed.archive = true;
+		if (parsed.checkVersions) {
+			const versionGate = runCheckVersionsGate(deps, cwd);
+			if (!versionGate.ok) return versionGate;
+		}
 		const result = await deps.runPack({
 			cwd,
 			agentPlugins: parsed.agentPlugins,
@@ -4425,7 +4679,21 @@ const pack = createPack({
 			marketplaceOutputs
 		});
 	},
-	checkReleaseTag: (options) => checkReleaseTag(options)
+	checkReleaseTag: (options) => checkReleaseTag(options),
+	checkVersionAlignment: (options) => checkVersionAlignment({
+		config: options.config,
+		cwd: options.cwd,
+		projectRoot: options.projectRoot,
+		root: options.root
+	}),
+	loadMarketplaceAuthoringConfig: (options) => loadMarketplaceAuthoringConfig(options),
+	detectAuthoringConfigSource: (options) => detectAuthoringConfigSource(options),
+	versionAlignmentErrorMessages: (report) => versionAlignmentErrorMessages({
+		strategy: "lockstep",
+		expected: null,
+		ok: false,
+		packages: report.packages
+	})
 });
 //#endregion
 //#region src/modules/Plugin/services/runPlugin.ts
@@ -4457,7 +4725,7 @@ Usage:
 
 Options:
   -y, --yes           Non-interactive defaults (version 0.1.0); allow overwrite
-  --target <id>       Record host target (e.g. cursor)
+  --target <id>       Write target: <id> (limits deployment to that agent; not with --agent-plugins)
   --agent-plugins     Create an Agent Plugins v1 portable root (no bapm.yml)
   --skills            Include a minimal portable skills/example/SKILL.md layout
   -v, --verbose       Extra logging (optional)
@@ -5480,7 +5748,7 @@ function parseUpdateArgs(argv) {
 	};
 }
 function formatUpdateHelp(deps) {
-	return `${deps.name} update — Re-resolve dependency pins (rs-011/rs-012)
+	return `${deps.name} update — Re-resolve dependency pins
 
 Usage:
   bapm update [packages...] [options]

package/package.json

@@ -1,8 +1,22 @@
 {
   "name": "@b-apm/cli",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "description": "bapm CLI — Better Agent Package Manager",
+  "keywords": [
+    "b-apm",
+    "bapm",
+    "unstable"
+  ],
+  "homepage": "https://github.com/Sdju/bapm#readme",
+  "bugs": {
+    "url": "https://github.com/Sdju/bapm/issues"
+  },
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Sdju/bapm.git",
+    "directory": "packages/cli"
+  },
   "bin": {
     "bapm": "./dist/cli.mjs"
   },
@@ -19,8 +33,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@b-apm/integration-api": "0.1.0",
-    "@b-apm/core": "0.1.0"
+    "@b-apm/integration-api": "0.2.1",
+    "@b-apm/core": "0.2.1"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",
@@ -28,7 +42,10 @@
     "typescript": "^7.0.2",
     "vite": "npm:@voidzero-dev/vite-plus-core@latest",
     "vite-plus": "latest",
-    "@b-apm/integration-cursor": "0.1.0"
+    "@b-apm/integration-cursor": "0.2.1"
+  },
+  "engines": {
+    "node": ">=22.12.0"
   },
   "feod": {
     "srcRoot": "src",
@@ -54,23 +71,6 @@
       "privateModulesPrefix": null
     }
   },
-  "engines": {
-    "node": ">=22.12.0"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/Sdju/bapm.git",
-    "directory": "packages/cli"
-  },
-  "homepage": "https://github.com/Sdju/bapm#readme",
-  "bugs": {
-    "url": "https://github.com/Sdju/bapm/issues"
-  },
-  "keywords": [
-    "unstable",
-    "bapm",
-    "b-apm"
-  ],
   "scripts": {
     "build": "vp pack",
     "dev": "vp pack --watch",